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Art Unit: 2431 

1 This action is in response to the communication filed on 4/15/20005. 

2 DETAILED ACTION 

3 Claims 1-56 have been examined. 

4 Title 

5 The title of the invention is acceptable. 

6 Information Disclosure Statement 

7 The information disclosure statement(s) (IDS) submitted on 4/15/2005 are in compliance 

8 with the provisions of 37 CFR 1 .97. Accordingly, the examiner is considering the information 

9 disclosure statements. 

10 Drawings 

1 1 The drawings filed on 4/15/2005 are acceptable for examination proceedings. 

12 Claim Objections 

13 Claim 53 is objected to because of the following informalities: Claim 53 misspells the 

14 word "optimizing". Appropriate correction is required. 
15 

1 6 Claim Rejections - 35 USC §102 

17 The following is a quotation of the appropriate paragraphs of 35 U.S. C. 102 that form the 

1 8 basis for the rejections under this section made in this Office action: 

19 A person shall be entitled to a patent unless - 

20 (a) the invention was known or used by others in this country, or patented or described in 

21 a printed publication in this or a foreign country, before the invention thereof by the applicant 

22 for a patent. 
23 
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1 (b) the invention was patented or described in a printed publication in this or a foreign 

2 country or in public use or on sale in this country, more than one year prior to the date of 

3 application for patent in the United States. 
4 

5 (e) the invention was described in (1) an application for patent, published under section 



6 122(b), by another filed in the United States before the invention by the applicant for patent or 

7 (2) a patent granted on an application for patent by another filed in the United States before the 

8 invention by the applicant for patent, except that an international application filed under the 

9 treaty defined in section 351(a) shall have the effects for purposes of this subsection of an 

10 application filed in the United States only if the international application designated the United 

1 1 States and was published under Article 21(2) of such treaty in the English language. 
12 

13 

14 Claims 1-8, 11-17, 20-23, and 44-47 are rejected under 35 U.S.C. 102(e) as being 

1 5 anticipated by Forslow (US Patent Application Publication 2002/0 133534). 

16 Regarding claim 1, Forslow disclosed a gateway (Forslow Fig. 1 Element 1) for 

17 connecting an external portion of a network (Forslow Fig. 1 Elements 8a and 8b) to an internal 

18 secured portion of the network (Forslow Fig. 1 Elements 12a and 6c and 6d) wherein the 

19 gateway is arranged to identify automatically when a communication session exists between two 

20 mobile workstations both of which are connected in the external portion of the network (Forslow 

21 Paragraphs 0105-01 10). 

22 Regarding claim 12, Forslow disclosed a network including an internal secured portion 

23 (Forslow Fig. 1 Elements 12a and 6c and 6d) which connects, via a gateway (Forslow Fig. 1 

24 Element 1) to an external portion (Forslow Fig. 1 Elements 8a and 8b), the network comprising a 

25 plurality of workstations including mobile workstations (Forslow Fig. 1 Elements 3a and 3b); the 

26 gateway and secure communication means by which information is transferable securely to a 

27 first mobile workstation in the external portion of the network via the gateway and by which 

28 information is transferable securely to a second mobile workstation in the external portion of the 



Application/Control Number: 1 0/53 1 ,653 Page 4 

Art Unit: 2431 

1 network via the gateway (Forslow Paragraphs 0105-0110); and information transfer means 

2 located within the internal secured portion of the network or within the gateway and arranged to 

3 send, using the secure communication means, an identifier of the second mobile workstation to 

4 the first mobile workstation for use as an address in a packet originating from the first mobile 

5 workstation and destined for the second mobile workstation (Forslow Paragraphs 0105-01 10). 

6 Regarding claim 2 1 , Forslow disclosed a method of securely routing communications 

7 between a first mobile node (3 a) and a second mobile node (3b) of a network including an 

8 internal secured portion (Forslow Fig. 1 Elements 12a and 6c and 6d) which connects, via a 

9 gateway (Forslow Fig. 1 Element 1) to an external portion (Forslow Fig. 1 Elements 8a and 8b), 

10 comprising the steps of: maintaining a secure communication means by which information is 

1 1 transferable securely to a first mobile node in the external portion of the network via the gateway 

12 and by which information is transferable securely to a second mobile node in the external portion 

13 of the network via the gateway (Forslow Paragraphs 0 1 05-0 1 1 0); sending an identifier of the 

14 second mobile node to the first mobile node using the secure communication means (Forslow 

15 Paragraphs 0105-01 10); and addressing a packet sent from the first mobile node to the second 

16 mobile node using the identifier of the second mobile node and routing the packet, using the 

17 identifier of the second mobile node, from the first mobile node to the second mobile node, not 

1 8 necessarily via the gateway (Forslow Paragraphs 0 1 05-0 110). 

19 Regarding claim 23, Forslow disclosed a mobile workstation (3 a) for connecting to an 

20 external portion of a network (Forslow Fig. 1 Elements 8a and 8b) that includes an internal 

21 secured portion (Forslow Fig. 1 Elements 12a and 6c and 6d) connected, via a gateway (Forslow 

22 Fig. 1 Element l)to the external portion, comprising: means for using a secure communication 
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1 means by which information is transferable securely from the internal portion of the network to 

2 the mobile workstation via the gateway (Forslow Paragraphs 0 1 05-0 1 1 0); means arranged to 

3 receive, via the first secure communication means, an identifier of another mobile workstation 

4 also connected to the external portion of the network (Forslow Paragraphs 0105-01 10); and 

5 means for including the identifier of the other mobile workstation as an address in a packet for 

6 transmission to the other mobile workstation (Forslow Paragraphs 0 1 05-0 1 1 0). 

7 Regarding claim 44, Forslow disclosed a mobile workstation for connecting to a virtual 

8 private network that includes an internal secured portion (Forslow Fig. 1 Elements 8a and 8b) 

9 connected, via a gateway (Forslow Fig. 1 Element 1 ) to the external portion (Forslow Fig. 1 

10 Elements 8a and 8b), and for communicating while in the internal portion using packet addresses 

1 1 which are private to the network, the mobile workstation comprising: means for using a first 

12 secure communication means by which packets addressed to the private address of the mobile 

13 workstation are transferable securely from the internal portion of the network to the mobile 

14 workstation via the gateway (Forslow Paragraphs 0105-01 10); means arranged to receive, via the 

15 first secure communication means, first security information for enabling a second secure 

16 communication means (Forslow Paragraphs 0105-01 10); and means for using the enabled second 

17 secure communication means to securely receive further packets, addressed to a public address 

18 of the mobile workstation, from another mobile workstation also in the external portion of the 

1 9 network (Forslow Paragraphs 0105-011 0). 

20 Regarding claim 2, Forslow disclosed monitoring the source and destination of received 

21 packets (Forslow Paragraphs 0105-01 10). 
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1 Regarding claim 3, Forslow disclosed having secure communication means by which 

2 information is transferable securely to the two mobile workstations separately (Forslow 

3 Paragraphs 0105-01 10). 

4 Regarding claims 4, 16, Forslow disclosed that the secure communication means includes 

5 a first Security Association with a first mobile workstation and a second Security Association 

6 with a second mobile workstation (Forslow Paragraphs 0105-0110 and 0114). 

7 Regarding claims 5-6, and 14 Forslow disclosed that the gateway is arranged to send, 



8 using the secure communication means, an identifier of a second mobile workstation to a first 

9 mobile workstation for use as an address in a packet originating from the first mobile 

1 0 workstation and destined for the second mobile workstation (Forslow Paragraphs 0 1 05-0 1 1 0), 

1 1 and the identifier of the second mobile workstation is a Home Address (Forslow Paragraphs 

12 0105-0110). 

13 Regarding claims 7-8, Forslow disclosed that the gateway is arranged to send, using the 

14 secure communication means, an identifier of the first mobile workstation to the second mobile 

15 workstation for use as an address in a packet originating from the second mobile workstation and 

1 6 destined for the first mobile workstation (Forslow Paragraphs 0 1 05-0 1 1 0), and the identifier of 

17 the first mobile workstation is a Home Address (Forslow Paragraphs 0105-01 10). 



1 8 Regarding claim 1 1 , Forslow disclosed that the gateway is further arranged to identify 

19 automatically when a mobile workstation moves between the internal and the external portions 

20 of the network (Forslow Paragraph 0135 ). 

21 Regarding claim 13, Forslow disclosed that the information transfer means is further 

22 arranged to send, using the secure communication means, an identifier of the first mobile 
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1 workstation to the second mobile workstation for use as an address in a packet originating from 

2 the second mobile workstation and destined for the first mobile workstation (Forslow Paragraphs 

3 0105-0110). 

4 Regarding claim 15, Forslow disclosed that the secure communication means provides an 

5 encrypted communications channel to the first mobile workstation and an encrypted 

6 communications channel to the second mobile workstation (Forslow Paragraphs 0 1 05-0 1 1 0). 

7 Regarding claim 17, Forslow disclosed that the gateway is arranged to detect a 

8 communications session between two mobile workstations which are connected at the external 

9 portion of the network (Forslow Paragraphs 0 1 05-0 1 1 0). 

10 Regarding claim 20, Forslow disclosed that the network is arranged to use private 

1 1 addresses to communicate within the internal portion of the network and the identifier of the 

12 second workstation is a public address (Forslow Paragraphs 0105-01 10). 

13 Regarding claim 22, Forslow disclosed the steps of: sending an identifier of the first 



14 mobile node to the second mobile node using the secure communication means; and addressing a 

15 packet sent from the second mobile node to the first mobile node using the identifier of the first 

16 mobile node and routing the packet from the second mobile node to the first mobile node, not 

1 7 necessarily via the gateway (Forslow Paragraphs 0105-01 10). 

18 Regarding claims 45-47, Forslow disclosed a database and means for modifying the 

19 database in response to the received first security information, wherein the database includes a 

20 Security Association Database (SAD) which is modified to include a new Security Association, 

21 wherein the database includes a Security Policy database which is modified so that packets for 
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1 the other mobile workstation use the new Security Association (Forslow Paragraphs 0114, and 

2 0167). 

3 Claim Rejections - 35 USC § 103 

4 The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

5 obviousness rejections set forth in this Office action: 

6 A patent may not be obtained though the invention is not identically disclosed or 

7 described as set forth in section 102 of this title, if the differences between the subject matter 

8 sought to be patented and the prior art are such that the subject matter as a whole would have 

9 been obvious at the time the invention was made to a person having ordinary skill in the art to 

10 which said subject matter pertains. Patentability shall not be negatived by the manner in which 

1 1 the invention was made. 
12 

13 Claims 9-10, 18-19, 24-43, and 48-56 are rejected under 35 U.S.C. 103(a) as being 

14 unpatentable over Forslow, and further in view of Hansen (IPsec and Mobile-IP in Mobile Ad 

15 Hoc Networking). 

16 Regarding claim 24, 9-10, and 18-19, Forslow taught a virtual private network including 



17 an internal secured portion (Forslow Fig. 1 Elements 1 2a and 6c and 6d) which connects, via a 

18 gateway (Forslow Fig. 1 Element 1) to an external portion (Forslow Fig. 1 Elements 8a and 8b), 

19 the network being arranged to communicate within the internal portion of the network using 

20 private addresses and comprising: a plurality of workstations including mobile workstations 

21 (Forslow Fig. 1 Elements 3a and 3b); the gateway; first secure communication means by which 

22 information is transferable securely to a first mobile workstation connected at the external 

23 portion of the network via the gateway and by which information is transferable securely to a 

24 second mobile workstation connected at the external portion of the network via the gateway 

25 (Forslow Paragraphs 0 1 05-0 1 1 0); and information transfer means arranged to send first security 
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1 information to the first mobile workstation and second security information to the second mobile 

2 workstation using the first secure communication means (Forslow Paragraphs 0 1 05-0 1 1 0), 

3 wherein the first mobile workstation uses the first security information and the second mobile 

4 workstation uses the second security information to enable a second secure communication 

5 means by which further information is transferable securely between the first mobile workstation 

6 and the second mobile workstation (Forslow Paragraphs 0 1 05-0 1 1 0), but Forslow did not 

7 disclose the transfer between the first mobile workstation and the second mobile workstation 

8 occurring without passing through the gateway. 

9 Hansen, in an analogous art, teaches that IPv6 Mobile IP provides support the mobile 

10 node to generate its own care-of address and to capsulate/decapsulate the traffic it sends/receives, 

1 1 thereby allowing for traffic to bypass the home agent and instead traffic can be sent directly from 

12 the communicating node to the mobile node and the mobile node can respond directly to the 

13 correspondent node (Hansen Sections 3, and 4.2-4.3). 

14 It would have been obvious to the ordinary person skilled in the art at the time of 

15 invention to have employed the teachings of Hansen in the virtual private networking system of 

16 Forslow by providing having the home agent provide the mobile nodes with each others public 

17 addresses, and having the mobile nodes tunnel traffic directly between one another rather than 

1 8 through the home agent. This would have been obvious because the ordinary person skilled in 

19 the art would have been motivated to optimize the routing of the traffic. 

20 Regarding claim 43, Forslow taught a method of securing communications between a 

21 first mobile node and a second mobile node of a virtual private network including an internal 

22 secured portion which connects, via a gateway to an external portion, comprising the steps of: 
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1 communicating within the internal portion of the network using private addresses (Forslow 

2 Paragraphs 0 1 05-0 1 1 0); maintaining a first secure communication means by which information 

3 is transferable securely to the first mobile node in the external portion of the network via the 

4 gateway and by which information is transferable securely to a second mobile node in the 

5 external portion of the network via the gateway (Forslow Paragraphs 0105-01 10); sending first 

6 security information to the first mobile node using the first secure communication means 

7 (Forslow Paragraphs 0105-01 10); sending second security information to the second mobile 

8 node using the first secure communication means (Forslow Paragraphs 0105-01 10); creating a 

9 second secure communication means in the first mobile node, using the first security information 

10 in the first mobile node and the second security information in the second mobile node; and 

1 1 using the second secure communication means, and for transferring further information between 

12 the first and second mobile nodes while they both remain in the external portion of the network 

13 (Forslow Paragraphs 0105-01 10), but Forslow failed to teach not using the first secure 

14 communication means (i.e. the first and second communication means are different), for 

15 transferring further information between the first and second mobile nodes while they both 

16 remain in the external portion of the network. 

17 Hansen, in an analogous art, teaches that IPv6 Mobile IP provides support the mobile 

18 node to generate its own care-of address and to capsulate/decapsulate the traffic it sends/receives, 

19 thereby allowing for traffic to bypass the home agent and instead traffic can be sent directly from 

20 the communicating node to the mobile node and the mobile node can respond directly to the 

21 correspondent node (Hansen Sections 3, and 4.2-4.3). 
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1 It would have been obvious to the ordinary person skilled in the art at the time of 

2 invention to have employed the teachings of Hansen in the virtual private networking system of 

3 Forslow by providing having the home agent provide the mobile nodes with each others public 

4 addresses, and having the mobile nodes tunnel traffic directly between one another rather than 

5 through the home agent. This would have been obvious because the ordinary person skilled in 

6 the art would have been motivated to optimize the routing of the traffic. 

7 Regarding claim 48, Forslow taught a virtual private network including an internal 

8 secured portion which connects, via a gateway to an external portion, the network being arranged 

9 to communicate within the internal portion of the network using private addresses and 

10 comprising: a plurality of workstations including mobile workstations; the gateway; means for 

1 1 dynamically updating an identifier of the first mobile workstation as it moves within the external 

12 portion of the network; means for communicating the updated identifier of the first mobile 

13 workstation to the second mobile workstation; and means for sending packets from the second 

14 mobile workstation to the first mobile workstation using a secure communication means, 

15 wherein the packets are addressed using the updated identifier of the first mobile workstation and 

1 6 are routed without necessarily passing through the gateway (Forslow Paragraphs 0 1 05-0 1 1 0), but 

17 Forslow failed to teach secure communication means by which information is transferable 

1 8 securely, without passing through the gateway, between a first mobile workstation connected to 

19 the external portion of the network and a second mobile workstation connected to the external 

20 portion of the network. 

21 Hansen, in an analogous art, teaches that IPv6 Mobile IP provides support the mobile 

22 node to generate its own care-of address and to capsulate/decapsulate the traffic it sends/receives, 
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1 thereby allowing for traffic to bypass the home agent and instead traffic can be sent directly from 

2 the communicating node to the mobile node and the mobile node can respond directly to the 

3 correspondent node (Hansen Sections 3, and 4.2-4.3). 

4 It would have been obvious to the ordinary person skilled in the art at the time of 

5 invention to have employed the teachings of Hansen in the virtual private networking system of 

6 Forslow by providing having the home agent provide the mobile nodes with each others public 

7 addresses, and having the mobile nodes tunnel traffic directly between one another rather than 

8 through the home agent. This would have been obvious because the ordinary person skilled in 

9 the art would have been motivated to optimize the routing of the traffic. 

10 Regarding claim 53, Forslow taught a method of optimizing the routing of secure 

1 1 communications between a first mobile node and a second mobile node of a network including 

12 an internal secured portion which connects, via a gateway to an external portion, comprising the 

13 steps of: communicating within the internal portion of the network using private addresses; 

14 moving the first mobile node within the external portion of the network; modifying an identifier 

15 of the first mobile node in response to its movement; communicating the modified identifier of 

16 the first mobile node to the second mobile node; (Forslow Paragraphs 0105-01 10), but Forslow 

17 failed to specifically teach creating a secure communication means by which information is 

1 8 transferable securely, without passing through the gateway, between a first mobile node of the 

19 external portion of the network and a second mobile node of the external portion of the network, 

20 and sending a packet from the second mobile node for reception by the first mobile node, 

2 1 without necessarily passing via the gateway, after addressing it using the updated identifier of the 

22 first mobile and securing it using the secure communication means. 
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1 Hansen, in an analogous art, teaches that IPv6 Mobile IP provides support the mobile 

2 node to generate its own care-of address and to capsulate/decapsulate the traffic it sends/receives, 

3 thereby allowing for traffic to bypass the home agent and instead traffic can be sent directly from 

4 the communicating node to the mobile node and the mobile node can respond directly to the 

5 correspondent node (Hansen Sections 3, and 4.2-4.3). 

6 It would have been obvious to the ordinary person skilled in the art at the time of 

7 invention to have employed the teachings of Hansen in the virtual private networking system of 

8 Forslow by providing having the home agent provide the mobile nodes with each others public 

9 addresses, and having the mobile nodes tunnel traffic directly between one another rather than 

10 through the home agent. This would have been obvious because the ordinary person skilled in 

1 1 the art would have been motivated to optimize the routing of the traffic. 

12 Regarding claim 54, Forslow taught a mobile workstation for connecting to an external 

13 portion of a network that includes an internal secured portion connected, via a gateway to the 

14 external portion, comprising: means for communicating using private addresses when in the 

15 internal portion of the network; means for receiving an identifier of the other mobile workstation; 

16 and means for sending packets, when in the external portion of the network, to the other mobile 

17 workstation using a secure communication means and the received identifier, but failed to 

1 8 specifically teach means for enabling and using a secure communication means by which 

19 information is transferable securely from the mobile workstation, when in the external portion of 

20 the network, to another mobile workstation connected to the external portion of the network 

2 1 without passing through the gateway. 
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1 Hansen, in an analogous art, teaches that IPv6 Mobile IP provides support the mobile 

2 node to generate its own care-of address and to capsulate/decapsulate the traffic it sends/receives, 

3 thereby allowing for traffic to bypass the home agent and instead traffic can be sent directly from 

4 the communicating node to the mobile node and the mobile node can respond directly to the 

5 correspondent node (Hansen Sections 3, and 4.2-4.3). 

6 It would have been obvious to the ordinary person skilled in the art at the time of 

7 invention to have employed the teachings of Hansen in the virtual private networking system of 

8 Forslow by providing having the home agent provide the mobile nodes with each others public 

9 addresses, and having the mobile nodes tunnel traffic directly between one another rather than 

10 through the home agent. This would have been obvious because the ordinary person skilled in 

1 1 the art would have been motivated to optimize the routing of the traffic. 



12 Regarding claim 25, Forslow and Hansen taught that the further information is 

13 transferable in packets using public addresses (Hansen Section 3.3). 

14 Regarding claim 26, Forslow and Hansen taught that the first secure communication 

15 means provides an encrypted communications channel to the first mobile workstation and an 

16 encrypted communications channel to the second mobile workstation (Forslow Paragraphs 0105- 

17 0110). 

18 Regarding claims 27-30, Forslow and Hansen taught that the first secure communication 

19 means comprises a first Security Association and a second Security Association, wherein the first 

20 Security Association is from the gateway to the first mobile workstation and the second Security 

21 Association is from the gateway to the second mobile workstation, wherein the first Security 

22 Association is from the internal portion of the network to the first mobile workstation and the 
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1 second Security Association is from the internal portion of the network to the second mobile 

2 workstation, and wherein communications using the first and second Security Associations use 

3 addresses which are private (Forslow Paragraphs 0 1 05-0 1 1 0). 

4 Regarding claims 3 1-32, and 50, Forslow and Hansen taught that the second secure 

5 communication means provides encrypted communications channels between the first and 

6 second mobile workstations, and that the first and second security information define the 

7 encryption/decryption of the encrypted communications channels (Hansen Section 2 and Forslow 

8 Paragraphs 0105-01 10). 



9 Regarding claims 33-34, Forslow and Hansen taught that the second secure 

10 communication means comprises at least a third Security Association from the first mobile 

1 1 workstation to the second mobile workstation, and wherein first and second security information 

12 defines at least the third Security Association (Forslow Paragraphs 0105-01 10). 

13 Regarding claim 35, Forslow and Hansen taught that at least a portion of the first security 

14 information and at least a portion of the second security information are created within the 

1 5 internal portion of the network (Forslow Paragraphs 0 1 05-0 1 1 0). 

16 Regarding claim 36, Forslow and Hansen taught that the gateway is arranged to detect a 

17 communications session between two mobile workstations which are connected at the external 

1 8 portion of the network (Forslow Paragraphs 0 1 05-0 1 1 0). 

19 Regarding claims 37, and 52, Forslow and Hansen taught that the second secure 

20 communication means is enabled by the adaptation of databases in the first and second mobile 

21 workstations (Hansen Section 4.2-4.3). 
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1 Regarding claims 38-40, and 55-56, Forslow and Hansen taught information transfer 

2 means arranged to send, using the first secure communication means, an identifier of the second 

3 mobile workstation to the first mobile workstation for use as an address in a packet originating 

4 from the first mobile workstation and destined for the second mobile workstation, the identifier 

5 of the second mobile workstation is a Home Address, and the identifier of the second mobile 

6 workstation is a public address (Hansen Section 4.2-4.3 and Forslow Paragraphs 0105-01 10). 

7 Regarding claims 41-42, and 49, Forslow and Hansen taught means for dynamically 

8 updating an identifier of the first mobile workstation as it moves within the external portion of 

9 the network; means for communicating the updated identifier of the first mobile workstation to 

10 the second mobile workstation; and means for sending packets from the second mobile 

1 1 workstation to the first mobile workstation using the second secure communication means, 

12 wherein the packets are addressed using the updated identifier of the first mobile workstation, 

13 and wherein the updated identifier is a Care-of-Address (Hansen Section 4.2-4.3 and Forslow 

14 Paragraphs 0105-01 10). 

1 5 Regarding claim 5 1 , Forslow and Hansen taught that the secure communication means 

16 comprises a Security Association from the first mobile workstation to the second mobile 

17 workstation and a Security Association from the second mobile workstation to the first mobile 

1 8 workstation (Forslow Paragraphs 0105-0110). 
19 

20 

21 Conclusion 

22 Claims 1-56 have been rejected. 
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